Search Jobs | Dice.com

Job Details

Skills

Decision-making
Emerging Technologies
Business Process
Collaboration
Leadership
Effective Communication
Policies and Procedures
Supervision
Information Technology
Computer Science
CISSP
ISACA
CISA
CISM
Security+
GPEN
GSEC
SAP GRC
IT Audit
Security Engineering
Auditing
Financial Services
Information Security Governance
Regulatory Compliance
Banking
FFIEC
Gramm-Leach-Bliley Act
Information Security
Testing
Evaluation
Documentation
Security Architecture
Access Control
Encryption
Lifecycle Management
Software Security
Risk Management
Data Governance
Trend Analysis
Reporting
Security Controls
Risk Assessment
Corrective And Preventive Action
Dashboard
Cyber Security
INSPECT
Reasoning
Mathematics
Probability
Statistics
Algebra
Training
Presentations
Performance Management
Project Management
Preventive Maintenance

Decision-making
Emerging Technologies
Business Process
Collaboration
Leadership
Effective Communication
Policies and Procedures
Supervision
Information Technology
Computer Science
CISSP
ISACA
CISA
CISM
Security+
GPEN
GSEC
SAP GRC
IT Audit
Security Engineering
Auditing
Financial Services
Information Security Governance
Regulatory Compliance
Banking
FFIEC
Gramm-Leach-Bliley Act
Information Security
Testing
Evaluation
Documentation
Security Architecture
Access Control
Encryption
Lifecycle Management
Software Security
Risk Management
Data Governance
Trend Analysis
Reporting
Security Controls
Risk Assessment
Corrective And Preventive Action
Dashboard
Cyber Security
INSPECT
Reasoning
Mathematics
Probability
Statistics
Algebra
Training
Presentations
Performance Management
Project Management
Preventive Maintenance

Summary

External Applicants: Please apply through Prosperity Bank's Career Center at ;/strong> Applying through any other source may prevent Prosperity from receiving your application.

Internal Applicants: If you are a current associate of Prosperity Bank, please apply through the internal Talent - Career Center in ADP. Prosperity Bank is an Equal Opportunity Employer.

POSITION PURPOSE

The Information Security Assurance Analyst serves as an independent second line of defense resource responsible for assessing cybersecurity controls, evaluating risk management effectiveness, performing assurance activities, and monitoring compliance with cybersecurity policies, standards, regulatory requirements, and industry frameworks. The role conducts cybersecurity risk and control assessments, evaluates control design and effectiveness, monitors remediation of identified issues, and provides objective analysis, reporting, and recommendations to support risk-informed decision-making. The position collaborates with Information Technology, Enterprise Risk Management, Information Security, and business stakeholders to strengthen cybersecurity governance, risk management, and control oversight across the Bank.

ESSENTIAL FUNCTIONS AND BASIC DUTIES

Evaluate cybersecurity controls, technology architectures, control designs, governance processes, and risk management practices to assess design adequacy, operating effectiveness, risk mitigation, alignment with the Bank's risk appetite, and opportunities for control and risk management improvement.
Assess cybersecurity risks associated with technology initiatives, third parties, significant changes, and emerging technologies.
Identify and prioritize cybersecurity risk exposures, recommend risk mitigation strategies, and monitor and validate remediation activities and corrective actions.
Review and evaluate evidence supporting cybersecurity control implementation and effectiveness to determine compliance with regulatory, policy, and framework requirements.
Review the adequacy of corrective action plans and validate closure of cybersecurity findings, issues, and risk treatment activities.
Partner with cross-functional teams to assess compliance with cybersecurity standards and evaluate the effectiveness of security controls supporting business processes, technology solutions, and third-party services.
Collaborate across operational, third-party, and data governance risk domains to evaluate risk management practices and support risk assurance activities.
Strengthen cybersecurity governance by providing independent, risk-based assessments and recommendations to improve control effectiveness and risk management practices.
Monitor emerging threats, attack vectors, and vulnerabilities to evaluate potential impacts to the Bank and identify areas requiring additional risk oversight or control improvements.
Develop assurance reports, risk observations, findings, and recommendations for Information Security leadership and governance committees.
Develop, maintain, and report risk assurance metrics and dashboards that provide meaningful insight into cybersecurity risk, control effectiveness, and remediation activities.
Serve as a cybersecurity assurance subject matter expert during regulatory examinations, audits, and independent assessments.
Maintain effective communication with internal and external stakeholders to ensure timely and accurate cybersecurity risk awareness.
Participate in security meetings and contribute to the development of risk assurance policies and procedures.

The above statements describe the general nature and level of work only. They are not an exhaustive list of all required responsibilities, duties, and skills. Other duties may be added, or this job description amended at any time.

SUPERVISORY RESPONSIBILITIES:

This position has no supervisory role.

QUALIFICATIONS

Education/Certification:Bachelor's degree in Cybersecurity, Information Technology, Computer Science, a related discipline, or the equivalent of combined education and related work experience.

Professional certifications such as CISSP, CRISC, CGRC, CISA, CISM, Security+, CySA+, GPEN, GSEC, or equivalent certifications are preferred.

Experience Required:Minimum of 3 years of experience in information security, cybersecurity risk management, security assurance, governance, risk and compliance (GRC), information technology auditing, security architecture, security engineering, or a related cybersecurity discipline.

Experience performing cybersecurity risk assessments, control evaluations, control effectiveness reviews, assurance activities, compliance assessments, audit support, or related oversight and risk management functions.

Experience applying cybersecurity frameworks and standards, including the Cyber Risk Institute (CRI) Profile, NIST Cybersecurity Framework (CSF), FFIEC guidance, CIS Critical Security Controls, or similar industry frameworks.

Experience evaluating cybersecurity controls, reviewing evidence, assessing remediation activities, and developing risk-based findings, recommendations, or reporting.

Experience supporting internal audits, external audits, regulatory examinations, independent assessments, or assurance reviews in a regulated environment.

Demonstrated ability to successfully execute initiatives in complex and highly regulated environments.

Banking or financial services industry experience preferred.

Required Knowledge: Knowledge of information security governance, risk management, compliance, and assurance principles.

Knowledge of banking cybersecurity regulations, guidance, and frameworks, including FFIEC, GLBA, NIST Cybersecurity Framework (CSF), Cyber Risk Institute (CRI) Profile, and applicable regulatory requirements.

Knowledge of cybersecurity threats, vulnerabilities, attack techniques, technology risks, and risk assessment methodologies.

Knowledge of information security control design, implementation, testing, and effectiveness assessment.

Knowledge of risk-based control assessment techniques, including evidence evaluation, validation, documentation, and assurance review practices.

Knowledge of enterprise technology and security architecture concepts sufficient to assess cybersecurity risks and control effectiveness.

Knowledge of cybersecurity principles and practices, including confidentiality, integrity, availability, defense-in-depth, access control, encryption, and threat mitigation strategies.

Knowledge of system lifecycle management, secure-by-design principles, software security, third-party risk management, and data governance concepts.

Knowledge of cybersecurity risk metrics, quantification methodologies, trend analysis, and governance reporting techniques.

Skills/Abilities:Strong written, verbal, and presentation skills.

Ability to communicate cybersecurity risks and control issues to technical and non-technical audiences.

Ability to assess security controls and determine effectiveness.

Ability to identify cybersecurity risks, evaluate severity and business impact, and recommend practical mitigation strategies.

Ability to evaluate security architectures, designs, and technology implementations from a risk perspective.

Ability to perform security assurance reviews, risk assessments, and control effectiveness evaluations.

Ability to review and evaluate evidence supporting cybersecurity control implementation and effectiveness.

Ability to assess corrective action plans and validate remediation activities associated with cybersecurity findings, issues, and risk treatment plans.

Ability to analyze complex cybersecurity data and identify trends, weaknesses, and emerging risks.

Ability to develop clear, concise, and defensible reports, dashboards, findings, and recommendations.

Ability to interpret cybersecurity laws, regulations, standards, policies, and contractual requirements.

Ability to build effective relationships while maintaining appropriate independence and objective challenge.

PHYSICAL ACTIVITIES AND REQUIREMENTS OF THIS POSITION

Talking:Especially where one must frequently convey detailed or important instructions or ideas accurately, loudly, or quickly.

Average Hearing:Able to hear average or normal conversations and receive ordinary information.

Repetitive Motion:Movements frequently and regularly required using the wrists, hands, and/or fingers.

Average Visual Abilities:Average, ordinary, visual acuity necessary to prepare or inspect documents or products, or operate machinery.

Physical Strength:Sedentary work; sitting most of the time. Exerts up to 10 lbs. of force occasionally. (Almost all office jobs.)

WORKING CONDITIONS

None: No hazardous or significantly unpleasant conditions (such as in a typical office).

MENTAL ACTIVITIES AND REQUIREMENTS OF THIS POSITION

Reasoning Ability: Ability to apply logical or scientific thinking to define problems, collect data establish facts and draw conclusions.

Able to interpret a variety of technical instructions and deal with multiple variables.

Mathematics Ability: Understanding of concepts such as probability, statistics, and basic algebra.

Language Ability: Ability to read periodicals, journals, manuals, dictionaries, thesauruses, and encyclopedias.

Ability to prepare business letters, proposals, summaries, and reports using prescribed format and conforming to all rules of punctuation, grammar, diction, and style.

Ability to conduct training, communicates at panel discussions, and make professional presentations.

Monday - Friday: 8:00AM - 5:00PM
40 hours

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
Dice Id: RTL962449
Position Id: d77ab4aa3df4b12603063cfc2675c70f
Posted 30+ days ago

Job Details

Skills

Decision-making
Emerging Technologies
Business Process
Collaboration
Leadership
Effective Communication
Policies and Procedures
Supervision
Information Technology
Computer Science
CISSP
ISACA
CISA
CISM
Security+
GPEN
GSEC
SAP GRC
IT Audit
Security Engineering
Auditing
Financial Services
Information Security Governance
Regulatory Compliance
Banking
FFIEC
Gramm-Leach-Bliley Act
Information Security
Testing
Evaluation
Documentation
Security Architecture
Access Control
Encryption
Lifecycle Management
Software Security
Risk Management
Data Governance
Trend Analysis
Reporting
Security Controls
Risk Assessment
Corrective And Preventive Action
Dashboard
Cyber Security
INSPECT
Reasoning
Mathematics
Probability
Statistics
Algebra
Training
Presentations
Performance Management
Project Management
Preventive Maintenance

Decision-making
Emerging Technologies
Business Process
Collaboration
Leadership
Effective Communication
Policies and Procedures
Supervision
Information Technology
Computer Science
CISSP
ISACA
CISA
CISM
Security+
GPEN
GSEC
SAP GRC
IT Audit
Security Engineering
Auditing
Financial Services
Information Security Governance
Regulatory Compliance
Banking
FFIEC
Gramm-Leach-Bliley Act
Information Security
Testing
Evaluation
Documentation
Security Architecture
Access Control
Encryption
Lifecycle Management
Software Security
Risk Management
Data Governance
Trend Analysis
Reporting
Security Controls
Risk Assessment
Corrective And Preventive Action
Dashboard
Cyber Security
INSPECT
Reasoning
Mathematics
Probability
Statistics
Algebra
Training
Presentations
Performance Management
Project Management
Preventive Maintenance

Summary

IT Security Analyst

Remote

•

Yesterday

IT Security Analyst Richmond,VA Remote Key Responsibilities Conduct and coordinate security risk assessments, Business Impact Analyses (BIAs), data classifications, privacy reviews, control assessments, and security feasibility reviews for new and existing systems, applications, and technology initiatives. Maintain risk registers, assessment records, corrective-action plans, exceptions, evidence repositories, and follow-up activities in enterprise GRC platforms (e.g., Archer GRC). Track remedi

Easy Apply

Contract

Depends on Experience

Information Security Assurance Analyst - Sugar Land or Lubbock

Skills

Summary

Dice Job Match Score™

Similar Jobs

Information Security Assurance Analyst - Sugar Land or Lubbock

Job Details

Skills

Summary

Dice Job Match Score™

Similar Jobs